Re: [exim] Taint checker confusing error (blaming file but c…

Αρχική Σελίδα
Delete this message
Reply to this message
Συντάκτης: Michael Haardt
Ημερομηνία:  
Προς: Jeremy Harris via Exim-users
Αντικείμενο: Re: [exim] Taint checker confusing error (blaming file but caused by later ldap lookup)
> > Perhaps quote_ldap should return an untainted string?
>
> No, it does no real checking so would just be
> an easy thing to abuse.


How would you do that? After all, originally it was introduced to prevent
just that, so people need to know.

Or are you talking about using quote_ldap outside the scope of ldap queries?

Michael